gcdRadar
closedclosed 3 Dec 2025Breaches & attacks4 Confirmed real-world lossAI

Secret Desires AI Platform Exposes Two Million Sensitive Images in Storage Leak

Secret Desires

AI platform Secret Desires exposed roughly two million sensitive images and personal details via misconfigured cloud storage. The leaked content was secured after journalists notified the service.

first report
19 Nov 2025
last update
19 Nov 2025

Timeline · 1

  1. 19 Nov 2025Secret Desires AI Platform Reportedly Exposed Nearly Two Million Sensitive Images in Cloud Storage Leak

Sources · 1

Research and catalogues

  1. 2025-11-19

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Data leakInfrastructure vulnerability
severity
4 · Confirmed real-world loss
targets
Enterprise deployment, Individuals
mitre atlas
no technique for these categories
dates
happened 19 Nov 2025 · first reported 19 Nov 2025
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.95 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Secret Desires AI Platform Exposes Two Million Sensitive Images in Storage Leak

https://gcdradar.vercel.app/incidents/secret-desires-ai-platform-exposes-two-million-sensitive-ima · AIR-2025-0186 · closed 2025-12-03

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss)
- Fix status: No fix needed
- First reported: 2025-11-19
- AI role: Attack on AI
- Products: Secret Desires

## Summary

AI platform Secret Desires exposed roughly two million sensitive images and personal details via misconfigured cloud storage. The leaked content was secured after journalists notified the service.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-11-19: Secret Desires AI Platform Reportedly Exposed Nearly Two Million Sensitive Images in Cloud Storage Leak (https://incidentdatabase.ai/cite/1284)

## Sources

- 2025-11-19 AI Incident Database: Secret Desires AI Platform Reportedly Exposed Nearly Two Million Sensitive Images in Cloud Storage Leak https://incidentdatabase.ai/cite/1284

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed8.2
    Dify CVE-2026-41949: Dify authorization bypass in file preview endpoint

    Patch now · Disclosed · since 18 May 2026 · CVE-2026-41949

    AI
  2. live
    SGLang SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents

    Breaches & attacks · Exploited · since 8 Nov 2026

    AI
  3. closed4.3
    AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access

    Patch now · Disclosed · since 28 May 2026 · CVE-2026-47713

    AI
  4. closed
    AI
  5. closed9.1
    Dify Dify Authorization Bypass Leads to Tenant Trace Configuration Exposure

    Patch now · Disclosed · since 18 May 2026 · CVE-2026-41947

    AI
  6. closed6.5
    Open WebUI CVE-2026-45351: Open WebUI System Prompt Exposure to Non-Admin Users

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45351

    AI